Behavioral task
behavioral1
Sample
4cde669c3e5633c1e275c9178a7ae5f0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4cde669c3e5633c1e275c9178a7ae5f0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4cde669c3e5633c1e275c9178a7ae5f0_JaffaCakes118
-
Size
21KB
-
MD5
4cde669c3e5633c1e275c9178a7ae5f0
-
SHA1
c670761cb196cbb9eacc02775676281885f76222
-
SHA256
915dfc30b5908a216c108bcf76ad68d846ab3150b0f0d62b194e535fae6438a7
-
SHA512
3d229f8a2dd46013e71bc4d0cd8e8b218ab999335bdbe9c3189f5ffe3df8a3e6578bcff287159ef23264db766a13c4b0f580c562c96a000c24ee0e8a5db6eddd
-
SSDEEP
384:DTRdWmpK6/2uLEJhEKv7WtJWWtw6DsCD8mL6BcAa02UUKL37GbMlv/0JTIJ+E:D9dWmp525JhExtJWWtwQsEkanW37l0J6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cde669c3e5633c1e275c9178a7ae5f0_JaffaCakes118
Files
-
4cde669c3e5633c1e275c9178a7ae5f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 246KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE